I could have a server that doesn't have any access to the database at all, and it could still render content for the user.
And if the server is for something critical, like purchases, it can still use redis on each request to verify that a JWT is still valid.